Privacy Policy

1. Data Controller

GreedInk, Ring 11, 2502 Biel/Bienne, Switzerland
Email: thepunishergreed@gmail.com

2. Data Collected

We collect the following data depending on the context:

  • Contact / booking: first name, last name, email, phone
  • Consent form (before session): first name, last name, date of birth, full address, email, phone, ID type and number, medical information (allergies, healing, diabetes, epilepsy, pregnancy, ongoing treatments, etc.), acceptance of terms, signature name, timestamp and IP address at the time of signing
  • Merchandise orders: first name, last name, email, phone, full postal address (street, postcode, city). This data is used solely for processing and delivering your order, and is deleted after 3 years.
  • Navigation: anonymised technical data (pages visited)

Medical data collected via the consent form constitutes health data under Swiss data protection law (FADP). It is collected based on your explicit consent and is necessary for the exercise of our activity in compliance with applicable hygiene and safety standards for tattooing.

3. Purposes of Processing

  • Managing your appointments and contacting you
  • Establishing and retaining proof of your informed consent before a tattooing session
  • Ensuring traceability of materials used (inks, needles) in accordance with legal obligations
  • Proving the authenticity of the digital signature (IP + timestamp)
  • Complying with our legal obligations

4. IP Address

Your IP address is automatically recorded when you sign the digital consent form. It is stored together with the timestamp and your signature name for consent proof purposes. It is not used for any other purpose.

5. Sub-processors and Hosting

Your data is processed by the following providers, contractually bound to protect your information:

  • Sanity.io — storage of consent forms (EU servers)
  • Resend — sending transactional emails
  • Vercel — website hosting
  • Google Calendar — appointment management (name, email, session date/time). Data processed by Google LLC in accordance with its privacy policy
  • Google Places API — displaying public client reviews from Google Maps. No personal data is transmitted to Google during this consultation

We do not sell or rent your personal data to third parties.

6. Data Retention

Consent forms are kept for a minimum of 10 years in accordance with industry best practices (medical traceability). Contact data related to bookings is deleted after 3 years of inactivity.

7. Your Rights (FADP)

Under Swiss law (FADP), you have the following rights:

  • Right of access to your data
  • Right of rectification
  • Right to erasure (subject to legal retention obligations)
  • Right to object to processing
  • Right to data portability

To exercise these rights: thepunishergreed@gmail.com

8. Cookies

Our website uses only technically essential cookies. No third-party tracking cookies are used without your consent.

9. Security

Access to consent forms is protected by authentication. Data is transmitted via HTTPS. Only the artist has access to the complete form data.

Last updated: 20.03.2026